IC87331: TSM CLIENT TRADITIONAL SCHEDULER DENIAL OF SERVICE VULNERABILITY

IBM Tivoli Storage Manager (TSM) Client 6.2.5 Downloads and READMEs

APAR status

• Closed as program error.

Error description

• TSM client traditional scheduler Denial of Service vulnerability
  can disable scheduler. Affects all platforms on all releases.
  CVSS base score: 4.3
  See Security bulletin at this link:
  http://www.ibm.com/support/docview.wss?&uid=swg21624135
  

Local fix

• Use CAD scheduler, or traditional scheduler in polling mode
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: Version 5.5, 6.1, 6.2 and 6.3                *
  *                 backup-archive clients running on all        *
  *                 supported platforms.                         *
  ****************************************************************
  * PROBLEM DESCRIPTION: See Security Bulletin at this link:     *
  *      http://www.ibm.com/support/docview.wss?&uid=swg21624135 *
  ****************************************************************
  * RECOMMENDATION: Follow the recommendations in the Security   *
  *                 Bulletin. This issue is fixed in:            *
  *                 6.4.0.1, 6.3.1, and 6.2.5 (when available).  *
  *                 Workarounds: use the CAD scheduler or        *
  *                 use traditional scheduling in Polling mode.  *
  ****************************************************************
  

Problem conclusion

• The problem has been fixed so that it no longer occurs.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Modules/Macros

• DSMC     SCHED
  

Fix information

• Fixed component name

  TSM CLIENT

• Fixed component ID

  5698ISMCL

Applicable component levels

• R62A PSY

     UP

• R62H PSY

     UP

• R62L PSY

     UP

• R62M PSY

     UP

• R62S PSY

     UP

• R62W PSY

     UP

• R63A PSY

     UP

• R63H PSY

     UP

• R63L PSY

     UP

• R63M PSY

     UP

• R63S PSY

     UP

• R63W PSY

     UP